© Cloud Security Alliance, 2015 Wilco van Ginkel, Co-Chair BDWG

Agenda © Cloud Security Alliance, Big Data Level Set 2.Who are we? 3.What do we do? 4.What have we done so far? 5.What are we working on? 6.Q&A

Big Data Level Set © Cloud Security Alliance, 2015

© Cloud Security Alliance, 2015.

‘Word on the street’ Sliding window Dimensions don’t always expand in the same directions. Examples: Twitter feeds (small data, but very high velocity) Hubble Telescope pictures (large pic, but low volume) Is Unstructured Data really unstructured?

What’s next in BD? Fast data (e.g., IoT) Climb up the BD stack Visualization Applying BD techniques to ‘Dark Data’ (e.g., Ayasdi) And much more… © Cloud Security Alliance, 2015.

BD Security… Yeah, what about it? © Cloud Security Alliance, 2015

© Cloud Security Alliance, Source: Verizon Big Data White Paper “How to thrive on the frontiers of data” Internal External Owned, subscribed, bought Format Governance Data silos Storage infrastructure Data Scientists Predictive Prescriptive Visualization Think different Not always why Plug information in business process Actionable Big Data Life Cycle

© Cloud Security Alliance, Still need to balance Risk Profile Security Requirements (CIAA) Business Requirements

© Cloud Security Alliance, And also ensure data qualities Source: ISACA White Paper “Big Data – Impact & Benefits”, March 2013

© Cloud Security Alliance, Can’t we just use current security controls and standards? Well, Yes and No…

Change of playing field… New Paradigm/Technology The Big Data V’s  Data Explosion Cloud: cheap & easy access to compute & storage Data on the go  Mobility all the way Data without borders Difference in international legislation … © Cloud Security Alliance, 2015.

So, there is work to do… © Cloud Security Alliance, 2015

Nice to meet you! © Cloud Security Alliance, 2015

Who are we? Started April 2012 Focus on Big Data Privacy & Security Different Initiatives/sub working groups Works together with other orgs, like NIST Leadership team: Chair - Sree Rajan, Fujitsu Co-Chair - Wilco van Ginkel, Verizon Co-chair - Neel Sundaresan, Ebay © Cloud Security Alliance, 2015.

Our Journey © Cloud Security Alliance, Develop best practices for security and privacy in big data Support industry and government on adoption of best practices Establish liaisons with other organizations in order to coordinate the development of big data security and privacy standards Accelerate the adoption of novel research aimed to address security and privacy issues

Focus areas © Cloud Security Alliance, Security Analytics Cryptography and Privacy Technologies Infrastructure Security Privacy, Policy, Governance and Legal Issue Framework and Taxonomy

What have we done so far? © Cloud Security Alliance, 2015

The Top Ten © Cloud Security Alliance, November 2012 April

© Cloud Security Alliance, 2014.

© Cloud Security Alliance, Use Case(s) Modeling Analysis Implementation

Big Data Analytics Report © Cloud Security Alliance, September

© Cloud Security Alliance, Examples WINE Platform BD Analytics for Security Botnet monitoring APT Detection

The Top Ten Crypto Challenges © Cloud Security Alliance, March

Big Data Taxonomy © Cloud Security Alliance, Taxonomy = “The science or practice of classification”

Source:

Big Data Taxonomy © Cloud Security Alliance, September

© Cloud Security Alliance, 2015.

Other initiatives © Cloud Security Alliance, 2015

BDWG Other Initiatives We provided input for the upcoming NIST Big Data Standard. We provided comments to the White House Request for Comment on Big Data Privacy. Check out: what-the-white-house-wants-to-do-about-it/ what-the-white-house-wants-to-do-about-it/ Lots of media interviews. Particularly after we have published a deliverable © Cloud Security Alliance, 2015.

What is next? © Cloud Security Alliance, 2015

10 Sections 1.Secure Computations in Distributed Programming Frameworks 2.Security Best Practices for Non-Relational Data Stores 3.Secure Data Storage and Transactions Logs 4.End-point Input Validation/Filtering 5.Real-Time Security/Compliance Monitoring 6.Scalable and Composable Privacy-Preserving analytics 7.Crypto-Enforced Access Control and Secure Communication 8.Granular Access Control 9.Granular Audits 10.Data Provenance © Cloud Security Alliance, 2015.

Help needed… 1.Secure Computations in Distributed Programming Frameworks 2.Security Best Practices for Non-Relational Data Stores 3.Secure Data Storage and Transactions Logs 4.End-point Input Validation/Filtering 5.Real-Time Security/Compliance Monitoring 6.Scalable and Composable Privacy-Preserving analytics 7.Crypto-Enforced Access Control and Secure Communication 8.Granular Access Control 9.Granular Audits 10.Data Provenance © Cloud Security Alliance, 2015.

How to get involved? © Cloud Security Alliance, CSA Big Data Working Group Site: CSA, Big Data LinkedIn: Basecamp Project Collaboration Site Request Form For any questions/remarks/feedback, please contact either: WhoHow Sreeranga (Sree) Rajan Wilco van Ginkel Neel Sundaresan

? ? ? ? © Cloud Security Alliance, 2015